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The Claims 

The following Is a listing of the claims, which arc presented in accordance with revised 
37 C.F.R. §1.121. 

1 . (Currently amended) A method for providing accessibility to a plurality of 
remote service providers across a network via a single login to a host service provider, each of 
the plurality of remote service providers being accessible through the host service provider and 
each of the plurality of remote service providers having separate login procedures requiring data, 
the method comprising the steps of: 

the host service provider receiving the single login from a user, the host service provider 
having a universal session manager, 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provide r in such rfl flrmpr 
that the nsftr iq prftAentpH wjffr j n fnrmatinn. in a £infllr r gra phical user in terface^ that prffy'tH 
bv both the host se rvice provid er and the rcrjyptp s ervice provider . 

2. (Original) The method of claim 1 , further comprising the step of connecting to a 
trusted service provider having special access requirements, wherein 
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a trusted service module acts as an intermediary between the host service provider and the 
trusted service provider. 

3, (Original) The method of claim 2, wherein the trusted service module receives a 
sessionID from the trusted service provider. 

4, (Original) The method of claim 3, wherein the trusted service module places a 
text file on the user's network data acquisition module. 

5, (Original) The method of claim 4, wherein said text file comprises a cookie. 

6, (Original) The method of claim 1, further comprising the step of registering the 
user with the remote service provider. 

7, (Currently amended) A system for providing accessibility to a plurality of 
remote service providers via a single login to a host service provider, each of the plurality of 
remote service providers being accessible through the host service provider and each of the 
plurality of remote service providers having separate login procedures requiring data, the system 
comprising: 

a user system having a network data acquisition module; 
a plurality of remote service providers; 

a host service provider for receiving the single login, the host service provider having a 
universal session manager; 

the universal session manager receiving data from a validation database based on the 
single login to the host service provider, the universal session manager passing the data, which is 
required for access to the remote service provider. directljLto the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
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sided fliir.hftnticat.in n. the two-sided authentication b eing performed directly between the 
universal s ession manager and the remote fifrrYiffffi prqyjder: and 

the validation database for storing the data for accessing the remote service provider, the 
universal session manager communicating with the validation database to obtain the data; and 

wherein the host service provider directs the user to the selected one of the plurality of 
remote service providers using the data, 

8. (Canceled) 

9. (Previously presented) The system of claim 7, said validation database further 
storing information for registering the user with the remote service provider, 

10. (Original) The system of claim 7, further comprising a trusted service module 
that serves as an intermediary between the host service module and a trusted service provider. 

11. (Original) The system of claim 10, wherein said trusted service provider is a 
remote service provider with special access requirements. 

12. (Original) The system of claim 7, wherein the network data acquisition module is 
an Internet browser. 

13. (Original) The system of claim 7, wherein the remote service provider further 
comprises a registration module and a login module. 

14. (Currently amended) The system of claim 13, wherein the login module 
receives the data for gaining access to the services provided by the remote service provider^and 

therein the host service provider directing the use r to the selected one of t he plurality of 
remote service prflY idfi rs usinp the dqrq includes presenting the yser with in formation, in, ft pjngfe 
F a Ptlff fll user interface tfiflf provided by both thehost service provider arfl the re mote service 
Provider. 
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15. (Original) The system of claim 13, wherein the registration module receives the 
data for registering a user with the remote service provider. 

16. (Currently amended) The method of claim 1, wherein the two-sided 
authentication is a triple handshake, the triple handshake including: 

the nni versa! session man ager sendin g a usernarne and password fa fre remote service 
provider constituting a login request: 

the mmftte service provider sending the univers al se^n m anaper a reply tn the login 

foe qpiverpj) sessj o p r^ ^n gger directing thy user to {he remote service provider. 

17. (Currently amended) The method of claim 16, wherein the remote service 
provider is a distinct remote Site from the host Service provide r, and each ste p of the triple 
handshake is effected directly hetwe.en-tfae-univ^rsal session manager and the remote service 
provider , 

1 8. (Currently amended) The system of claim 7, wherein the two-sided 
authentication is a triple handshak e, each step of the triple h andshake being performed directly 
between the univers al session manager and the remote service provider . 

19. (Previously presented) The method of claim 1, wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

20. (Previously presented) The method of claim 1, wherein the host service provider 
receiving the single login from the user is performed over a network. 
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21 . (Previously presented) The system of claim 7, wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

22. (New) The method of claim 1, wherein the host service provider has control of a 
navigation bar in the graphical user interface, and web pages from the remote service provider 
are hosted in the graphical user interface and contain a navigation bar. 
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